Vulnanalysis | Penetration Testing Tools

XSSer

February 18, 2014portsWeb Applicationsgui, http, https, vulnanalysis, webapps

Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. It contains several options to try to bypass certain filters, and various special techniques of code injection.

Yersinia

February 18, 2014portsExploitation Tools, Sniffing/Spoofing, Vulnerability Analysisexploitation, gui, sniffing, spoofing, vulnanalysis

Yersinia is a framework for performing layer 2 attacks. It is designed to take advantage of some weakeness in different network protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems.

zaproxy

February 18, 2014portsPassword Attacks, Sniffing/Spoofing, Web Applicationsfuzzing, gui, http, https, passwords, proxy, sniffing, vulnanalysis, webapps

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

DAVTest

February 16, 2014portsWeb Applicationsexploitation, http, https, vulnanalysis, webapps

DAVTest tests WebDAV enabled servers by uploading test executable files, and then (optionally) uploading files which allow for command execution or other actions directly on the target. It is meant for penetration testers to quickly and easily determine if enabled DAV services are exploitable.

copy-router-config

February 16, 2014portsInformation Gathering, Vulnerability Analysisnetworking, snmp, vulnanalysis

Copies configuration files from Cisco devices running SNMP.

cisco-ocs

February 16, 2014portsExploitation Tools, Vulnerability Analysisexploitation, vulnanalysis

A mass Cisco scanning tool.

cisco-global-exploiter

February 16, 2014portsExploitation Tools, Vulnerability Analysisexploitation, stresstesting, vulnanalysis

Cisco Global Exploiter (CGE), is an advanced, simple and fast security testing tool.

cisco-auditing-tool

February 16, 2014portsExploitation Tools, Password Attacks, Vulnerability Analysisexploitation, passwords, vulnanalysis

Perl script which scans cisco routers for common vulnerabilities.

Burp Suite

February 16, 2014portsPassword Attacks, Sniffing/Spoofing, Web Applicationsfuzzing, gui, http, https, passwords, proxy, sniffing, vulnanalysis, webapps

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.

Nmap

February 15, 2014portsInformation Gathering, Vulnerability Analysisenumeration, http, https, infogathering, portscanning, smb, smtp, snmp, ssl, tftp, vulnanalysis

Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.

Tag: vulnanalysis